Title: Testing a file carving tool using realistic datasets generated with openness by a user level file system
Authors: Kaparthi Srinivas; Temberveni Venugopal
Addresses: Department of CSE, Sree Chaitanya College of Engineering, LMD Colony, Thimmapur, Karimnagar, Telangana, India ' Department of CSE, JNTUH College of Engineering, Nachupally, Karimnagar. Telangana, India
Abstract: During the development phase of a file carver, it is inappropriate to use a used hard disk as an input medium due to the fact that the file system does not provide openness regarding file fragmentation and location of data on the disk. In this paper, we propose a method that provides realistic datasets with openness which can be used to test carving tools. Realistic property of datasets is achieved by implementing a file system at user level. A large file is used to mimic a hard disk in this process. The large file, on the hard disk, is handled by the host file system. The same large file to mimic as a test hard disk is handled by a file system at user level and hence openness is achieved.
Keywords: metadata; digital forensics; data recovery; data analysis techniques; data analysis strategies; virtual disk; operating system; image file carving; user level file system; ULFS; script file; kernel level file system; realistic datasets; datasets with openness; software testing; data clusters.
International Journal of Data Analysis Techniques and Strategies, 2020 Vol.12 No.2, pp.155 - 171
Received: 11 Oct 2017
Accepted: 13 May 2018
Published online: 30 Mar 2020 *